Security AI Architect for Hybrid Cloud & IAM (Flexible)

IBM; United States; Remote; USD 140,000 - 200,000; Full time

Job summary

IBM Consulting is seeking a Security AI Solution Architect to own end-to-end security architecture for Tower 4 agentic, automation, and secure-by-default capabilities. You will translate IBM security policy, client obligations, existing control evidence, and delivery risks into governed digital-agent patterns, control architectures, and reusable security blueprints.

In this role, you\'ll work in IBM Consulting Client Innovation Centers, collaborating with CISO, CSS, BISO, and tower architects to

Responsibilities

• Define Tower 4 reference architecture for controlled digital agents, security pattern libraries, evidence normalization, and secure-by-default implementation.
• Translate IBM internal security standards, SOC 2, ISO 27001, infrastructure checkpoint evidence, and cross-tower requirements into a common control and assessment architecture.
• Design human-in-the-loop controls, approval gates, audit logging, least-privilege access, rollback patterns, and exception handling for agentic workflows.
• Own security architecture decisions for agent-assisted discovery, IAM/offboarding assessment, vulnerability triage, AppSec/repository review, evidence reporting, and remediation workflow support.
• Partner with CISO, CSS, BISO, IBM Consulting Delivery CIO, PMO, and tower architects to align Tower 4 outputs with existing IBM control programs and shared services.
• Define secure-by-default patterns for new / existing Consulting assets and reusable remediation patterns for existing delivery exposure.
• Maintain Tower 4 architecture artifacts, decision records, control catalog, pattern catalog, and exception principles.
• Review and approve agentic designs before production use, especially where agents access security evidence, project data, repositories, ticketing systems, or control tooling.

Job description

IBM Consulting is seeking a Security AI Solution Architect to own end-to-end security architecture for Tower 4 agentic, automation, and secure-by-default capabilities. You will translate IBM security policy, client obligations, existing control evidence, and delivery risks into governed digital-agent patterns, control architectures, and reusable security blueprints.

In this role, you\'ll work in IBM Consulting Client Innovation Centers, collaborating with CISO, CSS, BISO, and tower architects to